Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
File: 2270e26b-c2b1-4cc3-800b-33825c0d723b.roa (raw, json)
Hash identifier: 7NIZGIetFawM6eaVoP7uQpScWBLb2sCx/qJ6KQzurGc=
Subject key identifier: 2D:F1:1D:49:3B:23:2E:6E:5E:06:6A:EF:94:46:37:11:42:24:2D:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B58127D18659E0AC215DE9B84353EB17CEF9A8A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
Signing time: Mon 26 Oct 2026 05:20:19 +0000
ROA not before: Mon 26 Oct 2026 05:20:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:58:12:7d:18:65:9e:0a:c2:15:de:9b:84:35:3e:b1:7c:ef:9a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=02fe83af8aa12775cc56b20b561762da8216ec10b4ad2b3a1b67ca91687b3df4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:44:a6:83:f5:dc:53:e9:ac:e4:ef:e4:db:
0b:fa:b5:9e:c5:2a:82:93:19:db:fb:ad:df:6c:c9:
f7:7b:db:ab:0d:e1:57:1a:b9:0f:57:09:a7:6c:61:
f0:b8:88:6a:38:b3:a1:b5:ca:98:d6:1f:63:5c:e2:
c4:26:59:0f:16:e7:7a:da:0d:8e:aa:a5:b5:39:83:
1c:d6:24:11:b7:51:da:04:ad:ce:5e:64:aa:43:e2:
df:c3:49:c8:db:3b:73:e6:4d:35:1b:e8:03:06:62:
85:f4:05:a7:38:f7:5f:33:cd:4c:d6:e9:f4:3e:06:
75:ff:55:20:7a:1b:45:38:c7:e6:ff:7f:65:4f:db:
e7:12:a4:b1:81:61:67:ba:aa:62:88:1c:86:2e:bf:
fb:57:74:ab:f9:7a:6f:e3:91:27:66:02:a4:57:e1:
fb:8c:7c:17:ea:65:7f:d1:63:97:80:e1:62:1c:02:
fe:d0:57:eb:6a:c4:68:c3:7d:a9:d2:a2:a3:9f:dc:
87:67:f8:df:f3:f2:dd:bc:c2:62:af:74:f5:58:5d:
14:fb:ea:c1:60:7f:aa:30:9d:ff:b5:a6:df:f4:6a:
16:3d:72:0f:96:2d:b3:79:e9:8b:46:ba:f3:57:5d:
64:dc:c7:2f:e3:5c:ad:6d:25:05:ed:85:17:18:33:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:1D:49:3B:23:2E:6E:5E:06:6A:EF:94:46:37:11:42:24:2D:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:6e:f5:ec:1c:d4:10:c8:09:69:02:bd:a9:5a:dd:06:f5:65:
b5:9c:81:ef:6d:23:ce:b2:d9:e9:f1:18:84:f0:e6:30:5b:93:
03:0e:a6:37:8a:e3:05:3a:a0:38:28:e6:72:80:81:86:ee:e1:
5f:eb:ab:1c:94:6b:62:00:33:09:fc:5a:e7:ea:cb:19:85:db:
d8:82:d1:7c:1f:48:ae:ec:8e:77:cc:91:f7:97:41:8d:cc:4c:
f1:52:6c:a3:73:01:38:94:f6:78:b8:c3:8c:84:90:bb:cf:1e:
a0:a4:e5:bf:96:5b:fb:33:cd:ed:bc:33:18:c1:34:f5:92:ec:
f9:cf:ea:5c:7f:3d:24:0a:b1:c6:75:57:19:20:03:71:30:c8:
c2:3e:38:4f:e1:af:e2:f5:00:89:db:9e:d0:9b:32:c2:a5:ca:
3f:39:76:27:fc:32:c6:1d:bb:0d:82:0b:70:e7:13:2d:c1:31:
b1:a7:08:7d:2b:07:7a:f5:01:35:c5:bb:b8:34:ad:ad:0d:1a:
60:bd:aa:21:86:87:d6:0a:58:e1:c9:6d:b8:e5:f6:89:cb:07:
91:76:73:8d:59:1d:c8:c0:ba:d4:55:48:5b:d7:a6:c8:4c:44:
a7:03:cb:b0:38:89:bd:35:44:55:bd:aa:1e:13:ca:02:63:b6:
bf:d2:a8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:13 2026 by rpki-client